Red Hat Security Advisory

RHSA-2022:8340

freetype security update

Released 2022-11-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) freetype-2.10.4-9.el9, freetype-devel-2.10.4-9.el9
Red Hat Enterprise Linux BaseOS (v. 9) freetype-2.10.4-9.el9

TI-2022-10444 CVE-2022-27404 · GHSA-22wv-f9f6-xwwm

MEDIUM 47

FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02736 Published 2022-04-22 Partial fix CWE-787

TI-2022-10446 CVE-2022-27406 · GHSA-34wh-7j35-vw3w

LOW 39

FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_Size.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03326 Published 2022-04-22 Partial fix CWE-125

TI-2022-10445 CVE-2022-27405 · GHSA-3p63-23m4-gmcp

LOW 38

FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02829 Published 2022-04-22 Partial fix CWE-125